fix(gitlab): harden API redirects and CSRF compatibility - #46

Open

jonschumaker wants to merge 3 commits into

unraid:mainfrom

jonschumaker:agent/gitlab-api-hardening

Commits on Aug 6, 2026

fix(gitlab): stop leaking the API token on redirect and globbing project paths

Eli Bosley (elibosley)
authored and
j-curatec
committed
94376e4
fix(gitlab): reject API redirects and support legacy CSRF
j-curatec
committed
96ebb87

Commits on Aug 7, 2026

fix(gitlab): preserve multiline project lists
j-curatec
committed
ca1bec9